From Collaborative RCE Tool Library
PE Validator Script
| Tool name: | PE Validator Script |
|
||
|---|---|---|---|---|
| Author: | Daniel Pistelli | |||
| Website: | http://ntcore.com/ | |||
| Current version: | 1.0.0.1 | |||
| Last updated: | ||||
| Direct D/L link: | http://ntcore.com/Files/PEValidator.cff | |||
| License type: | Freeware/Open | |||
| Description: | A simple script for the CFF Explorer which detects some of the most common PE integrity problems. Some of the things checked by this script: -- check CRC32 (useful for drivers) -- check number of rva and sizes -- check image size -- check sections -- check that EP is valid -- check that EP is in code -- check that the EP section is executable -- check data directories RVAs -- check whether the API IsDebuggerPresent is imported |
|||
| Related URLs: | No related URLs have been submitted for this tool yet | |||
| Screenshot: |
|---|
 |
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
